This is the official account of CyberXTron Technologies, an award-winning Cyber Security Company with a mission of helping organizations mitigate cyber attacks!
India
Joined October 2023
- Tweets1.2K
- Following43
- Followers400
- Likes20
CyberXTron Technologies retweeted
Organizations can quickly determine whether they have been affected by the FortiBleed breach and leverage XTron-AI to gain deeper insights into the leaked data, threat actor activity, indicators of compromise (IOCs), potential weaponization, and related cyber threats.
Access is limited and its free: cyberxtron.com/xtronai
CyberXTron Technologies retweeted
Security researchers around the world are tracking FortiBleed: A massive active exploitation campaign targeting Fortinet/FortiGate devices that has resulted in credential leaks affecting a significant number of Fortinet platforms.
Key findings:
🔴 320,777 FortiGate systems targeted
🔴 1.16 billion credential attempts processed
🔴 Password hashes cracked using a 45-GPU cluster
🔴 Attackers pivoted from VPN access into internal Active Directory environments
Credential leaks are rarely isolated incidents. They are often the first step in a much larger intrusion campaign. This operation demonstrates how exposed VPN credentials can become the initial access vector for deep network compromise, data theft, and long-term persistence.
Organizations are advised to rotate credentials, enable multi-factor authentication (MFA), and follow Fortinet's security best-practice recommendations.
Refer our blog for latest insights & detailed write-up related to Fortibleed : cyberxtron.com/resources/blo…
CyberXTron Technologies retweeted
For years, finding vulnerabilities was often the bottleneck. Now that equation may be changing.
AI is rapidly shrinking the time required to discover vulnerabilities, and the bigger challenge may soon become:
🔹 Verifying findings quickly
🔹 Performing responsible disclosure at scale
🔹 Building and testing patches faster
🔹 Getting users to deploy updates quickly
🔹 Managing increasing pressure on security teams
This could fundamentally reshape how we think about vulnerability management. The traditional coordinated disclosure model was built around a world where vulnerabilities were discovered at a human pace. But if AI can surface thousands of findings in days, can existing disclosure cycles realistically keep up?
As result, I believe we could see Shorter vulnerability closure cycles, Increased automation in triage and remediation, AI-assisted patch development, Evolution of responsible disclosure processes and Greater focus on preventive secure-by-design practices.
CyberXTron Technologies retweeted
The recent "Megalodon" campaign compromised 5,500+ GitHub repositories by injecting malicious GitHub Actions workflows into development pipelines. This wasn't a traditional malware attack, The objective was access.
Attackers targeted:
🔹 CI/CD secrets
🔹 API tokens
🔹 Cloud credentials
🔹 Authentication artifacts
🔹 Development environments
Modern organizations increasingly trust automation, pipelines, third-party integrations, and software dependencies. Threat actors understand that compromising one trusted component can create downstream access at scale. While many regulators emphasizes on performing supply-chain risk assessment at least on periodic intervals, we still see many organizations lack the practise.
CyberXTron Technologies retweeted
Tech Cafe at #NTLF2025 was buzzing with groundbreaking startups presenting solutions in enterprise #AI, #drones, #automotive, #healthtech, #sustainability, and more.
These startups are tackling pressing challenges, reshaping industries, and proving that deeptech is changing the world. As we wrap up an inspiring #NTLF2025, the energy and innovation on display highlight the incredible potential of startups to drive meaningful change and shape the tech-driven, human-centered future we envision.
@nasscom @nasscomdeeptech @nasscomai @ktech_DSAI @DSCI_Connect @RNamb @sangeetagupta29 @MKritika_ @SandeepBahl6
@ShaliniDewan @shivamsareen91 @Ankitthe1
@MokkaSpeaks @jeevmalhotra @godvinayak @alveofit @appsealing @bigdatamatica1 @CyberxtronTech @gahanai54552 @JisaSoftech @MeerkatsWorld @thrustworks
CyberXTron Technologies retweeted
🚨 Threat Campaign Alert: '8220 Gang' Evolves with Targeting Web Server Vulnerabilities! 🚨
Summary: 8220 gang identified exploiting new vulnerabilities (CVE-2020-14883, CVE-2021-44228, CVE-2017-3506) to deploy cryptojacking malware (AgentTesla, rhajk, nasqa) on Windows & Linux servers.
Threat Actor: 8220 gang (Chinese origin)
Malware: AgentTesla, rhajk, nasqa
Target Industry: Healthcare, Telecom, Finance
Targeted Applications/CVEs:
Oracle WebLogic Server (CVE-2020-14883, CVE-2017-3506)
Apache Log4j (CVE-2021-44228)
Atlassian Confluence Server (CVE-2021-26084, CVE-2022-26134)
Impact: Cryptojacking, potential data exfiltration
IOC_IPs:
45.15.158[.]154
45.164.23[.]184
45.164.23[.]194
45.164.23[.]221
45.164.23[.]242
45.164.23[.]226
45.164.23[.]231
IOC_URLs (Indicative List):
http[:)//165[.]22[.]194[.]104/bypass.ps1
http[:)//164[.]92[.]91[.]46/bypass.ps1
http[:)//79[.]1137[.]196[.]127/bypass2.ps1
http[:)//165[.]22[.]194[.]104/bypass.ps1
http[:)//5[.]42[.167[.]3/2.gif
IOCs_Sha256 (Indicative List):
dbab00a7c1213111341c2bea504fc11ecb68beal2c0f125589c8beab220dc7a3
cb6b5d56fec27c27bdae1b7fd9f6bd50d8544d9f73f55ef82f80fd4529993d5b
59eb1808ce879c8bf4c7669ee1a9038855aceb09a1f309772f8ce6d322b8885b
e617123cfa6873d2259aa4aa828150f02d64ce56d397a679dfa47fbf43ceb294
076d0e32e9233c101f7ef8489935bca861e3e3fbbc1962828bf469b7d4671263
MITRE_TTPs:
T1193,T1105,T1560,T1405,T1540,T1505
Action: Threat Management/SOC professionals shall use the listed IOCs, TTPs to detect the subjected campaign activities and also to perform proactive Threat Hunting.
Reference: This writing is based on the security research advisory released by Imperva Research Team.
---------------------------------------------------------------------------------------
🚀Join us on our mission to secure the digital world and make cyber defense affordable to everyone! 🌐 Follow "CyberXTron Technologies" for the timely, relevant and actionable cyber threat insights.
#8220Gang #AgentTesla #rhajk #nasqa #CVEExploits #CyberAttacks 🛡️🔒
CyberXTron Technologies retweeted
🚨 CVE Alert: 2 Apple iOS Zero-Day vulnerabilities exploited in-the-wild 🚨
Apple has released security advisories for two iOS zero-day vulnerabilities of which they are aware, as these vulnerabilities might be exploited in the wild.
1. CVE-2023-42916 - An out-of-bounds read vulnerability which may disclose sensitive information.
Fix: iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2.
2. CVE-2023-42917 - A memory corruption vulnerability which may lead to arbitrary code execution.
Fix: iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2
Apple iOS users are strongly recommended to upgrade to the fixed version.
---------------------------------------------------------------------------------------
🚀Join us on our mission to secure the digital world and make cyber defense affordable to everyone! 🌐 Follow "CyberXTron Technologies" for the timely, relevant and actionable cyber threat insights.
#CVE #APPLE #iOSvulnerability #zero-day #exploited_inthewild #CyberSecurity
CyberXTron Technologies retweeted
🚨 CVE Alert: Multiple Critical vulnerabilities reported in Zyxel NAS Products (CVSS 9.8/10)! 🚨
CVE-2023-4474 (CVSS 9.8) - improper neutralization of special elements in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0
Impact: Could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a crafted URL to a vulnerable device
CVE-2023-35138 (CVSS 9.8) - A command injection vulnerability in the “show_zysync_server_contents” function of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0
Impact: could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a crafted HTTP POST request.
CVE-2023-4473 (CVSS 9.8) - A command injection vulnerability in the web server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0
Impact: could allow an unauthenticated attacker to execute some operating system (OS) commands by sending a crafted URL to a vulnerable device.
Affected version:
NAS326: V5.21(AAZF.14)C0 and earlier
NAS542: V5.21(ABAG.11)C0 and earlier
Fix:
NAS326: V5.21(AAZF.15)C0
NAS542: V5.21(ABAG.12)C0
Note: The recommended verion also addresses few high severity vulnerabilities: CVE-2023-35137, CVE-2023-37927, CVE-2023-37928.
---------------------------------------------------------------------------------------
🚀Join us on our mission to secure the digital world and make cyber defense affordable to everyone! 🌐 Follow "CyberXTron Technologies" for the timely, relevant and actionable cyber threat insights.
#CVE #SecurityAlert #Zyxel #NAS326 #NAS542 #CyberSecurity 🛡️🔒
CyberXTron Technologies retweeted
🚨 New BLUFFS man-in-the-middle attacks exploits 2 Bluetooth vulnerabilities 🚨
Summary: BLUFFS (Bluetooth Forward and Future Secrecy) - The attack capitalize on two newly discovered weaknesses in Bluetooth, affecting the one-sided and repeatable derivation of session keys
CVE-2023-24023 - Allows an attacker to brute-force the session encryption key in real time and perform man-in-the-middle attacks.
Note:
Trialed on 17 distinct Bluetooth chips, these attacks wield a significant influence on the ecosystem.
Given that the attack target Bluetooth at the architectural level, their efficacy remains unaffected by the victim's hardware and software particulars.
---------------------------------------------------------------------------------------
🚀Join us on our mission to secure the digital world and make cyber defense affordable to everyone! 🌐 Follow "CyberXTron Technologies" for the timely, relevant and actionable cyber threat insights.
#CVE #BLUFFS #Bluetoothvulnerability #CyberSecurity 🛡️🔒
CyberXTron Technologies retweeted
🚨 Threat Campaign Alert: Qlik Sense vulnerabilities Exploited in Cactus Ransomware Campaign 🚨
Following Qlik Sense vulnerabilities being exploited to get "Initial access", which allowed attackers to install Cactus Ransomware.
1. CVE-2023-41265 (CVSS score: 9.9) - An HTTP Request Tunneling vulnerability
Impact: Allows a remote attacker to elevate their privilege and send requests that get executed by the backend server hosting the repository application.
Fix: Qlik Sense Security fixes released by 20th Nov'23
2. CVE-2023-41266 (CVSS score: 6.5) - A path traversal vulnerability
Impact: Allows an unauthenticated remote attacker to generate an anonymous session. This allows them to transmit HTTP requests to unauthorized endpoints
Fix: Qlik Sense Security fixes released by 20th Nov'23
3. CVE-2023-48365 (CVSS score: 9.9) - An unauthenticated remote code execution vulnerability
Impact: Remote attacker is able to elevate their privilege by tunneling HTTP requests, allowing them to execute HTTP requests on the backend server that hosts the repository application
Fix: Qlik Sense Security fixes released by 20th Nov'23
---------------------------------------------------------------------------------------
🚀Join us on our mission to secure the digital world and make cyber defense affordable to everyone! 🌐 Follow "CyberXTron Technologies" for the timely, relevant and actionable cyber threat insights.
#CVE #QlikSense #Cactusransomware #CyberSecurity 🛡️🔒
CyberXTron Technologies retweeted
Attention! Proof-of-concept (PoC) exploit released for WP Fastest Cache Plugin vulnerability! Nearly 6 lakh wordpress sites exposed to attack!
More details here: lnkd.in/gbxeWHsZ
Follow "CyberXTron Technologies" for the timely and actionable cyber threat insights.